This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft File: TTR1C-IXPLmwhqd8bepUtKhGmvM.mft (raw, json) Hash identifier: 2Fl6XluGF7aSPwrLhTdqRR5JtPQ/HDsyzPRhbvIjD9U= Subject key identifier: A3:46:A1:F3:BF:CC:FF:85:9C:DF:45:CE:11:C3:2E:30:6B:61:BE:23 Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3 Certificate issuer: /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3 Certificate serial: 019B428017F3248954C52339297B7C977B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft Manifest number: 0AFF Signing time: Sun 21 Dec 2025 20:00:49 +0000 Manifest this update: Sun 21 Dec 2025 20:00:49 +0000 Manifest next update: Mon 22 Dec 2025 20:00:49 +0000 Files and hashes: 1: TTR1C-IXPLmwhqd8bepUtKhGmvM.crl (hash: VXCRtW0iE7OhZt7YZfKpFQXHEIp3e5/mcaF4nPqpAJo=) 2: WYXlKPxfFrF5-delsIPB_r6FESQ.roa (hash: cI2mCSSEwOLi9AIJI3IVWlSF6M3b+jAGtzx5i3z7sFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:17:f3:24:89:54:c5:23:39:29:7b:7c:97:7b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3 Validity Not Before: Dec 21 20:00:49 2025 GMT Not After : Dec 22 20:00:49 2025 GMT Subject: CN=a346a1f3bfccff859cdf45ce11c32e306b61be23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:97:11:b8:2a:1e:7a:f9:d0:90:40:35:e5: 9a:b6:8d:7e:a1:b7:f8:1c:04:55:85:9c:75:0a:03: f6:6b:eb:db:2e:63:ef:b2:97:1b:1d:14:4e:ef:43: dc:92:f0:a7:95:16:fe:e4:b4:e5:6e:bd:ac:9d:83: cb:bd:2c:7b:b7:cc:13:77:64:95:08:45:c4:da:ab: 7c:c8:b6:a1:06:83:66:37:d8:d9:11:8f:17:cd:75: f8:6b:6a:5c:7d:33:5e:47:b6:d2:4d:c5:6a:6d:8e: b8:26:80:de:4a:47:b2:6f:a1:7e:8a:3a:83:7d:3c: 40:21:a0:ba:21:3f:38:07:be:93:40:9f:65:8c:e4: 53:b7:c2:75:5f:25:a6:fc:98:de:74:18:8c:96:a4: d5:20:3c:d4:f2:1b:56:99:29:2c:22:19:9d:43:e3: 35:4f:87:28:88:a7:22:73:ab:86:20:7d:3e:f2:6f: 5f:d9:2a:5a:42:a8:da:ba:75:1f:e7:88:2b:b2:a9: c0:79:f5:d1:53:a7:ff:b9:43:b6:3c:62:c5:3e:fe: 9a:3e:1a:eb:0f:56:7d:e7:b5:ae:72:4f:0c:d1:f6: ed:c3:15:ca:03:f1:42:58:03:b0:ec:55:7e:7b:bb: f3:c3:c5:e7:70:4f:dc:e0:b5:3c:a1:36:f6:df:8a: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:A1:F3:BF:CC:FF:85:9C:DF:45:CE:11:C3:2E:30:6B:61:BE:23 X509v3 Authority Key Identifier: keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1e:26:d5:cb:de:83:8e:9d:06:25:ff:bd:51:2b:b3:87:7d: da:0d:3d:90:0d:13:06:b1:9f:f4:e9:3e:b4:8e:8f:6d:b3:86: 90:85:93:58:e8:3c:0b:62:b2:96:1b:ff:ad:96:b9:6d:48:1a: 9e:f7:f9:70:66:55:df:58:fc:d0:b5:e4:5e:46:e5:d9:33:e9: 88:30:75:01:27:d9:6f:e0:5c:f6:20:1e:8d:0d:29:97:92:77: 2c:9b:c7:0b:93:13:e6:29:20:6d:64:cb:0e:33:c0:90:b4:40: 3a:e5:da:5a:04:db:08:a2:b3:38:fe:23:98:a4:2d:4b:63:46: f0:da:bd:eb:a0:d7:90:f4:cc:d6:a4:c8:e2:fb:ee:09:39:ce: 57:ce:e9:fa:85:b4:cb:ae:0c:dd:59:2e:12:5b:fc:de:0b:0c: 32:f1:14:dd:dd:99:cf:66:c2:63:f5:aa:a6:ce:86:9b:f4:78: 18:aa:e9:49:a7:56:75:9b:6f:a9:c7:de:20:28:2e:05:5d:42: 0b:5c:a6:90:74:8d:6e:68:a7:c2:fe:d0:25:74:22:f5:e5:69: 91:6c:87:b4:44:4a:ac:08:e0:c1:ca:14:47:7f:be:67:79:85: 73:4f:bf:f6:f2:69:06:b0:06:c8:3b:85:a1:83:ce:d4:b8:7e: 2c:9b:9c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgBfzJIlUxSM5KXt8l3uVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzQ3NTBiZTIxNzNjYjliMDg2YTc3YzZkZWE1NGI0YTg0 NjlhZjMwHhcNMjUxMjIxMjAwMDQ5WhcNMjUxMjIyMjAwMDQ5WjAzMTEwLwYDVQQD EyhhMzQ2YTFmM2JmY2NmZjg1OWNkZjQ1Y2UxMWMzMmUzMDZiNjFiZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj2XEbgqHnr50JBANeWato1+obf4 HARVhZx1CgP2a+vbLmPvspcbHRRO70PckvCnlRb+5LTlbr2snYPLvSx7t8wTd2SV CEXE2qt8yLahBoNmN9jZEY8XzXX4a2pcfTNeR7bSTcVqbY64JoDeSkeyb6F+ijqD fTxAIaC6IT84B76TQJ9ljORTt8J1XyWm/JjedBiMlqTVIDzU8htWmSksIhmdQ+M1 T4coiKcic6uGIH0+8m9f2SpaQqjaunUf54grsqnAefXRU6f/uUO2PGLFPv6aPhrr D1Z957Wuck8M0fbtwxXKA/FCWAOw7FV+e7vzw8XncE/c4LU8oTb234rhAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNGofO/zP+FnN9FzhHDLjBrYb4jMB8GA1UdIwQY MBaAFE00dQviFzy5sIanfG3qVLSoRprzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUt ZThiMDExZWE4ODk3LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUtZThiMDExZWE4ODk3 LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR4m1cve g46dBiX/vVErs4d92g09kA0TBrGf9Ok+tI6PbbOGkIWTWOg8C2Kylhv/rZa5bUga nvf5cGZV31j80LXkXkbl2TPpiDB1ASfZb+Bc9iAejQ0pl5J3LJvHC5MT5ikgbWTL DjPAkLRAOuXaWgTbCKKzOP4jmKQtS2NG8Nq966DXkPTM1qTI4vvuCTnOV87p+oW0 y64M3VkuElv83gsMMvEU3d2Zz2bCY/Wqps6Gm/R4GKrpSadWdZtvqcfeICguBV1C C1ymkHSNbminwv7QJXQi9eVpkWyHtERKrAjgwcoUR3++Z3mFc0+/9vJpBrAGyDuF oYPO1Lh+LJuceg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:11 2025 by rpki-client